Privacy Policy

1. Who we are

JobsAI ("we", "us", "our") operates the website at jobsai.work, the JobsAI web app, the browser extension, and related tools including Auto-Apply and Interview Buddy. We are the controller of the personal data described in this policy.

For any privacy question or to exercise your rights, contact us at support@jobsai.work.

2. Scope

This policy covers personal data we process through our website, apps, browser extension, the Interview Buddy and Auto-Apply features, and our marketing communications. It does not cover third-party sites we link to.

3. Data we collect

We collect the following categories of data:

• Account & contact details — your name and email, managed through our authentication provider (Clerk).
• Job-search materials — resumes/CVs you upload or build, parsed profile fields, cover letters, and tailored documents.
• Application data — the jobs you save, the answers and materials submitted via Auto-Apply, and application status.
• Interview prep data — for voice, avatar, and Interview Buddy sessions: audio you provide and the resulting transcripts and feedback.
• Usage & technical data — device, browser, IP, log and diagnostic data used to keep the service reliable and secure.
• Billing data — subscription and token-purchase records (card details are handled directly by Stripe; we never store full card numbers).
• Preferences — your job targets, locations, and marketing choices.

4. How we use your data

We use your data to:

• Provide and operate the service — parse and tailor resumes, generate cover letters, discover and match jobs, and prepare/submit applications you request.
• Power interview prep — run written, voice, avatar, and live Interview Buddy assistance.
• Process payments and manage your subscription and token balance.
• Improve reliability, security, and product quality.
• Send service messages, and — only with your consent — marketing emails.
• Detect, prevent, and address fraud, abuse, and security issues, and to comply with law.

5. AI processing & model providers

Some features send the minimum necessary content (e.g. your resume profile and a job description) to AI providers to generate outputs. Depending on the feature, these providers include OpenAI (resume tailoring, cover letters, matching, written/voice interview generation, and text-to-speech) and HeyGen/LiveAvatar (the streaming video avatar used in avatar interviews). We instruct providers not to use your content to train their models, and outputs are stored only in your account for as long as needed to deliver the feature.

Job listings and salary data are retrieved from third-party job data providers (e.g. Adzuna and other aggregators) based on your searches.

6. Automation & Auto-Apply

Auto-Apply fills and submits application forms on your behalf, following your saved preferences and the materials you provide. It carries out instructions you configure rather than making independent decisions about you with legal effect. You can keep a human in the loop at all times using the Approval Queue, which holds each application for your review before anything is sent.

To complete each application, we use a browser-automation provider (Skyvern) that receives the job details and the application data and materials needed to fill out and submit the form on the relevant job platform.

7. Audio & transcripts (Interview Buddy and voice features)

When you use voice, avatar, or live Interview Buddy features, audio is processed to produce a transcript and feedback. Voice processing and text-to-speech are handled by OpenAI; avatar interviews additionally stream a synthetic video presenter via HeyGen/LiveAvatar. Raw audio is used to generate the transcript and is not retained longer than necessary for that purpose; transcripts and scores are kept in your account so you can review them, until you delete them.

The desktop Interview Buddy app captures audio from your interviewer (system audio), not your microphone, to surface real-time guidance.

8. Google user data — connected Google account (Gmail & Calendar)

If you choose to connect your Google account, we request only the permissions needed for the feature: sending email on your behalf from your own address (the gmail.send scope) — for example candidate communications, outreach, and follow-ups — and creating or updating calendar events (the calendar.events scope) so we can add interviews to your calendar. We do NOT request permission to read, list, or download your existing Gmail messages. Incoming emails reach your in-app inbox through email forwarding, not through the Gmail API.

How we use it: we use these permissions solely to (a) send emails that you explicitly compose, approve, or send from within the app, and (b) create or update interview events on your calendar at your request. We do not read, scan, or store your existing emails, and we do not access unrelated calendar data.

Storage & retention: we store the OAuth access and refresh tokens needed to perform these actions, encrypted at rest, and retain them only until you disconnect your Google account or delete your account — at which point they are deleted.

Sharing & purpose limits: we do not sell Google user data, do not use it for advertising, and do not use it to develop, improve, or train generalized or non-personalized AI/ML models. We transfer it only to Google's own APIs to carry out the actions above, or where required by law.

Limited Use: JobsAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access: you can disconnect your Google account at any time in the app, or revoke access directly at https://myaccount.google.com/permissions.

9. “As provided” transmission

Application materials are transmitted to job platforms substantially as you provide them; we do not redact them. Please do not include sensitive data (such as government IDs, payment card numbers, or health information) in your resume or answers unless a specific application explicitly requires it.

10. How we share data

We do not sell or rent your personal data. We share it only as needed to run the service:

• Service providers (processors) acting on our behalf — e.g. Clerk (authentication), Supabase (database/storage), OpenAI (AI text and voice generation), HeyGen/LiveAvatar (streaming video avatar for avatar interviews), Skyvern (browser automation that fills and submits applications for Auto-Apply), Stripe (payments), Resend (email), PostHog (product/visitor analytics), and job-data providers such as Adzuna.
• Job platforms and employer application systems (ATS) when you apply or auto-apply to a role.
• Authorities or third parties when required by law, or to protect our rights, users, or the security of the service.

11. International transfers

Our providers may process data in the United States and other countries. Where data is transferred across borders, we rely on appropriate safeguards (such as Standard Contractual Clauses) offered by our providers.

12. Data retention

We keep account and job-search data for as long as your account is active. Logs and diagnostics are kept for a limited period (typically up to 12–24 months). Interview transcripts are kept until you delete them or close your account. When you delete data or your account, we remove it from active systems and purge it from backups within a reasonable period.

13. Cookies & similar technologies

We use cookies and similar technologies for sign-in/session management, remembering preferences, and product analytics (via PostHog) to understand how visitors — signed-in or not — navigate and engage with the site, including pages viewed, clicks, time on page, and approximate location (country/region/city) derived from IP. You can control cookies through your browser settings.

14. Security

We use reasonable technical and organizational measures to protect your data, including encryption in transit and at rest and access controls. Our database/storage provider (Supabase) maintains SOC 2 Type II controls. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

15. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your data, and to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any right, email support@jobsai.work. You may also have the right to complain to your local data protection authority.

16. Children

Our services are not directed to children, and we do not knowingly collect data from anyone under the age of digital consent. If you believe a child has provided us data, contact support@jobsai.work and we will delete it.

17. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where required.